bugzilla.mozilla.org has resumed normal operation. Attachments prior to 2014 will be unavailable for a few days. This is tracked in Bug 1475801.
Please report any other irregularities here.

bzlite should be hosted on a strong HTTPS setup

RESOLVED DUPLICATE of bug 1150824

Status

Firefox OS
General
RESOLVED DUPLICATE of bug 1150824
3 years ago
3 years ago

People

(Reporter: freddyb, Assigned: daleharvey)

Tracking

unspecified
ARM
Gonk (Firefox OS)

Firefox Tracking Flags

(blocking-b2g:2.5?)

Details

Hey Dale,

I just took a quick look at bzlite and it seems it's using HTTP and does not allow HTTPS at all.

Let's try to figure out how we can get this hosted on a strong HTTPS setup. I suppose folks from opsec (CCd) can help you with that as well.

Considering that most first dogfooders will have interesting bugzilla credentials (e.g. security permissions), we shouldn't let their login flow go over bzlite and HTTP.

(Even though it already uses HTTPS when talking to Bugzilla).
[Blocking Requested - why for this release]:
blocking-b2g: --- → spark?
(Assignee)

Comment 2

3 years ago
Yeh this is being working on 1150824, cheers
Status: NEW → RESOLVED
Last Resolved: 3 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 1150824
Group: b2g-core-security
blocking-b2g: spark? → 2.5?
You need to log in before you can comment on or make changes to this bug.